Privacy

Almost nothing.

DONTDROP has no accounts. We do not ask for email, phone, or GPS.

When someone takes the Egg, we store an approximate city, country, and coarse coordinates from request geolocation. Never a precise GPS fix. We do not persist raw IP addresses.

A first name can be written on a pass. It is plain text, capped at 30 characters, and shown on the public journey.

We record anonymous product events so we can see if the chain actually moves. No transfer tokens. No private keys.

Holder access lives in an HTTP-only cookie on that browser. Lose the cookie, lose the ability to pass. We will not invent accounts to fix that.